What problem does it solve? Auditing Cosmos SDK chains for consensus-critical bugs requires deep knowledge of dozens of vulnerability classes across SDK modules, IBC, EVM precompiles, and CosmWasm contracts, and missing one pattern can mean a chain halt or fund loss. ## Core Features & Use Cases - Parallel multi-agent scanning: Spawns specialized scanning agents covering 25 core, 16 IBC, 10 EVM, and 3 CosmWasm vulnerability patterns, each grounded in real advisories like Dragonberry, ASA-2024-007, and the Saga $7M exploit. - Automated discovery and threat modeling: Generates a CLAUDE.md technical inventory capturing SDK version, custom modules, ABCI hooks, AnteHandler chain, and trust boundaries before scanning. - Structured findings output: Writes each verified finding as an individual markdown file with severity, location, vulnerable code, attack scenario, and recommendation. - Use Case: Before launching a custom Cosmos chain with IBC and EVM support, run the scanner against the repo to catch signer annotation mismatches, IBC reentrancy, and EVM/Cosmos state desync bugs. ## Quick Start Scan the Cosmos SDK codebase in this repository for consensus-critical vulnerabilities and write the findings to the default output directory.
